Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/14d34a57-3108-3873-82a4-1a0d819dd0db.roa
File:                     14d34a57-3108-3873-82a4-1a0d819dd0db.roa (raw, json)
Hash identifier:          sgtRCmmhzfpcEsUl4gtzWwBXZ83wrTjCPSBbQWStYnM=
Subject key identifier:   75:05:90:A6:32:0D:A9:C4:61:3D:52:1F:58:45:A3:53:46:D9:45:89
Certificate issuer:       /CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
Certificate serial:       010D0C9F4328584E8DEFBE5EB6AF828B22BA26C0
Authority key identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/14d34a57-3108-3873-82a4-1a0d819dd0db.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     174
IP address blocks:        23.178.0.0/24 maxlen: 24
                          23.178.1.0/24 maxlen: 24
                          23.252.224.0/20 maxlen: 20
                          199.4.190.0/24 maxlen: 24
                          2606:7480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:be:5e:b6:af:82:8b:22:ba:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=3486b506-4d05-45eb-a784-6939674a93a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:d7:3d:3f:df:49:f4:08:62:4a:e4:33:0d:
                    e4:20:41:04:be:24:ac:1f:44:7c:01:a8:fb:af:dc:
                    97:23:3d:cf:bc:99:17:af:b4:a2:5f:e8:2d:4d:69:
                    51:98:0f:c2:35:8d:15:2d:6d:62:5e:66:20:00:d4:
                    a6:10:66:e1:2b:50:89:ce:87:68:2a:a2:f6:39:92:
                    64:4e:e1:68:5d:98:66:98:43:21:b1:ac:d1:e8:d7:
                    2b:88:be:b0:50:10:79:73:d6:b1:61:ee:0f:14:0c:
                    34:ec:10:02:52:26:f9:ed:ff:3f:5e:80:a9:66:0a:
                    94:f4:f5:ee:86:04:60:4d:3e:36:13:58:27:51:fa:
                    35:8a:80:b4:c3:6d:53:49:76:3d:7e:6d:dc:90:cd:
                    6b:8d:5d:39:5a:2f:74:f0:69:47:a1:df:2a:33:5f:
                    2c:98:b2:ea:4f:55:19:88:26:73:01:cc:a6:81:c8:
                    39:a0:ec:74:20:d3:07:85:ab:48:f4:f6:c1:6e:38:
                    24:bf:02:9b:0e:0e:50:14:8d:a5:ec:2e:be:49:e0:
                    70:59:5f:04:b5:50:01:e7:e5:5b:1f:c3:c1:c2:a3:
                    66:d6:46:45:86:37:ce:1c:6d:c3:06:6a:7b:32:0f:
                    05:b6:14:2f:67:93:0c:bb:c4:a3:1a:74:22:4e:86:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:05:90:A6:32:0D:A9:C4:61:3D:52:1F:58:45:A3:53:46:D9:45:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/14d34a57-3108-3873-82a4-1a0d819dd0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl

            X509v3 Authority Key Identifier:
                keyid:68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.0.0/23
                  23.252.224.0/20
                  199.4.190.0/24
                IPv6:
                  2606:7480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:63:56:dd:d2:71:86:d0:50:55:ca:03:f7:87:0f:ba:6d:
         1b:ea:70:c8:4a:e0:e2:1c:2d:bd:81:15:ba:f5:be:84:77:48:
         67:95:f4:4d:f3:b7:6f:7c:0d:89:6a:51:be:65:85:6b:72:a1:
         a1:81:f3:ed:40:5f:cf:55:9d:81:cf:fe:37:bb:41:eb:34:0f:
         78:98:53:a7:09:e5:fe:02:93:e5:f5:b7:ca:92:3f:08:97:79:
         1c:86:4c:ec:00:72:02:75:99:a3:24:7e:5e:e6:62:19:ce:96:
         35:65:c8:58:3c:47:01:c5:0e:c2:76:af:d5:69:b2:5a:78:15:
         d7:61:5f:af:c4:d1:81:32:83:6b:cb:72:ea:93:94:22:f9:02:
         c4:3e:9f:b7:8f:e1:b1:ca:6c:a7:0f:00:b8:be:62:68:1e:79:
         de:13:c6:c6:28:96:54:fd:ca:f4:a0:2d:35:a7:9c:6a:a4:9f:
         a8:ad:7a:ff:37:7e:b1:47:6f:5c:5f:7c:35:e6:f2:d5:b6:17:
         86:89:f2:fd:22:e6:cb:fb:eb:53:4a:03:00:17:09:3a:77:ac:
         bb:34:d7:21:0d:1b:13:ee:76:53:ca:2e:fe:35:4c:65:2a:66:
         56:4e:99:02:80:ec:90:b2:31:4f:0e:3f:11:1e:50:8e:05:f8:
         c8:c6:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:03:11 2026 by rpki-client